Privacy Policy

Information We Collect

• Your account

  Your name and email address, and a password if you sign up with email (we store only a one-way hash of it, never the password itself). If you sign in with Apple, Google or Facebook, we receive the name and email address that service shares with us.

• What you do in the app

  The information described in "Information Collected in the Visionaria App" below.

• Messages to us

  If you email info@visionariaapp.com or use the contact form on our website, we receive your name, email address and message.

• Visits to our website

  Our server receives the technical data every website receives (IP address, browser and the page requested) to deliver the page and protect the site. Analytics and advertising tags run as described in Cookies and Similar Technologies.

The app does not ask for your precise location, contacts, microphone or camera. Payments are handled by Apple and Google; we never receive your card or bank details.

How We Use Your Information

• To provide the Service: create and run your account, sign you in, keep your progress in sync, unlock the Premium you bought, and send the codes you request to sign up or reset your password.
• To answer your messages and support requests.
• To understand, in aggregate, which features and stories are used, and to find and fix crashes.
• To send push notifications you allowed and, only if you signed up and confirmed, quiz emails.
• To measure our own advertising, that is, to see which of our ads lead to visits, installs and subscriptions, as described in this policy. There are no ads in the app.
• To keep the Service secure (for example, limits on how many sign-up codes can be requested), to keep backups, and to comply with the law.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Legal Bases (EU, EEA and UK)

If you are in the European Union, the European Economic Area or the United Kingdom, we rely on these legal bases under Article 6(1) GDPR:

• Contract (Article 6(1)(b))

  Creating and running your account, providing the app and Premium, syncing your progress, sending the sign-up and password codes you request, and answering your support requests.

• Consent (Article 6(1)(a))

  Analytics and advertising tags on our website (cookie banner); on iPhone and iPad, reading the advertising identifier and sending it and subscription events to Meta (Apple's App Tracking Transparency prompt); on Android, and on iPhone and iPad with an App Store account in the EU, EEA, UK or Switzerland, everything the Facebook SDK in the app sends to Meta, including the Android advertising ID (the app's own "Allow" prompt and the switch in Settings); push notifications; quiz emails; and the optional profile photo and onboarding answers. You can withdraw consent at any time, as described in Your Rights; this does not affect processing before the withdrawal.

• Legitimate interests (Article 6(1)(f))

  In-app analytics and crash reports to understand use in aggregate and fix problems, Apple Ads attribution and campaign labels to see which of our own campaigns work, on iPhone and iPad with an App Store account outside the EU, EEA, UK and Switzerland, the app events sent to Meta without the advertising identifier (as described in "Advertising identifier and ad measurement"), keeping the Service secure, and backups. You can object to this processing.

• Legal obligation (Article 6(1)(c))

  Keeping records the law requires and answering lawful requests from authorities.

How We Share Information

We do not sell your personal data. We share it only:

• with the service providers listed in "Service Providers We Use" below, for the purposes stated there;
• with Apple and Google, who sell Premium and process payments under their own terms, and with Apple, Google or Facebook if you sign in with them;
• with Meta and Google to measure our own advertising, as described in "Advertising identifier and ad measurement" and in Cookies and Similar Technologies;
• when the law requires it (for example, a valid court order), or when needed to protect the rights and safety of our users, the public or us;
• with a buyer or successor if Visionaria is sold or merged, who must then keep protecting your data as this policy describes.

We do not give your data to advertisers, sponsors or marketing partners for their own marketing, and we do not use your email address to build advertising audiences.

Quiz Emails

On our quiz page you can ask us to email you your personal route. This is optional: your quiz result stays on the page without it. If you ask for it, we use:

• your email address;
• the quiz result (which city we suggested) and the language of the page.

Purpose and legal basis: we use this information only to send you one email with your route and a link to download the app, based on your consent (Article 6(1)(a) GDPR). The consent box is never ticked in advance. This is not a newsletter: you are not added to any mailing list and you get no further emails from this form.

Who sends the email: our website sends it through our own mail server, hosted on our servers in the European Union (Hetzner), from no-reply@visionariaapp.com. Replies go to info@visionariaapp.com. No outside email service receives your address.

Retention: we do not save your address in a database or a file. To stop the same address from being emailed more than once a day, our server keeps it in its working memory for up to 24 hours, after which it is gone. A copy of the email remains in your mailbox and, for a limited time, in our mail server's delivery log.

Cookies and Similar Technologies

Whether the site asks you first depends on where you are. In the EU, the EEA, the UK, Switzerland and Canada (we tell this from your browser's time zone, without looking up your IP address), visionariaapp.com uses only the storage the site needs to work until you choose in the cookie banner, such as remembering your cookie choice and, if you sign in to the web player, keeping you signed in; analytics and advertising tags (Google Analytics through Google Tag Manager, Microsoft Clarity and the Meta Pixel) load and set cookies only after you choose "Accept". Everywhere else these tags load when you open the site, without a banner. Wherever you are, you can turn them off at any time with "Your Privacy Choices" in the site footer. More in our Cookie Policy.

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of your personal information: the Meta Pixel does not load and Google's advertising storage stays off, whatever you choose in the banner. Google Analytics and Microsoft Clarity, which measure how the site is used and are not used for cross-context advertising, follow your cookie choice. Our website does not respond to "Do Not Track" signals, which have no agreed meaning.

The app does not use browser cookies. It keeps your sign-in and settings on your device.

How Long We Keep Your Information

• Account data

  Your name, email, profile photo, onboarding answers, listening progress and the ratings you give are kept while your account exists, and deleted from our database within 30 days of your request to delete the account.

• Backups

  Copies of our databases and of the files you upload (such as your profile photo), kept to recover from a failure, are stored on our servers at Hetzner and in Google Drive (see "Service Providers We Use"). They are encrypted and replaced on a rolling basis. The data of a deleted account stays in these encrypted backups for up to 90 days, then it is erased.

• A hash of a deleted account's email

  If you delete your account, we keep a one-way cryptographic hash of your email address (not the address itself) for 24 months, only to stop the same email from redeeming an invite code or earning a referral reward a second time. After 24 months it is deleted.

• Feedback you send from the app

  Kept for 24 months after you send it, or until you delete your account if that comes first.

• Payment provider events

  The technical notices our subscription provider sends us about a purchase (for example a renewal) are kept for 90 days. Your Premium status is kept as long as your account exists.

• Admin activity log

  Our record of changes made by our own staff in the admin tools is kept for 12 months.

• Emails you send us

  Kept in our mailbox only as long as we need them to answer you and handle follow-up questions. You can ask us to delete them.

• Quiz emails

  As described in "Quiz Emails" above.

• Crash reports

  Kept for up to 90 days.

• Analytics

  Event data in Google Analytics and Firebase Analytics is kept for at most 14 months. Aggregated reports that cannot identify you may be kept longer.

• Purchase records

  Apple, Google and Adapty keep purchase records under their own retention rules. If the law requires us to keep a record (for example, for tax or accounting), we keep only that record, for as long as required.

• Website server logs

  Kept only as long as needed for security and troubleshooting.

Your Rights

Wherever you live, you can:

• download a copy of your data in the app (Profile, Settings, Download my data) or by writing to us, and ask us to correct it if it is wrong (you can change your name and profile photo in the app yourself);
• delete your account in the app (Profile, Settings, Delete account) or as described on our account deletion page;
• withdraw a consent at any time: website tags with "Your Privacy Choices" in the site footer; tracking on iPhone and iPad in iOS Settings > Privacy & Security > Tracking; ad measurement on Android, and on iPhone in the EU, EEA, UK and Switzerland, with the "Ad measurement (Meta)" switch in the app's Settings; notifications in the app or phone settings; quiz emails with the unsubscribe link in every email.

To make a request, write to info@visionariaapp.com. We may ask you to write from the email address of your account, so we can check that the request comes from you. We answer within 30 days (45 days for California requests). Requests to download your data are answered within 30 days.

If you are in the EU, the EEA or the UK, you also have the right to restrict processing, to object to processing based on legitimate interests, and to receive the data you gave us in a machine-readable format (data portability). You have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you think your rights were infringed; in the UK, this is the Information Commissioner's Office (ICO). We would be glad to try to resolve your concern first, so please contact us.

If you are in Ukraine, you have the rights set out in the Law of Ukraine "On Personal Data Protection" and may complain to the Ukrainian Parliament Commissioner for Human Rights.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you these rights:

• Right to know and access: the categories and specific pieces of personal information we collected about you, its sources, the purposes, and the categories of third parties we disclose it to.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information (see below).
• Right to limit the use of sensitive personal information. We use sensitive personal information, such as your account login, only to provide the Service and keep it secure.
• Right to non-discrimination: we will not deny you the Service or charge you a different price because you used these rights.

In the categories of the CCPA, in the last 12 months we collected:

• Identifiers: name, email address, internal account ID, device and app instance identifiers, an anonymous identifier created by the Facebook SDK, IP address and the advertising identifier: on iPhone and iPad only if you allow tracking, on Android only if you allow ad measurement in the app.
• Commercial information: your Premium purchases and subscription status (never card details).
• Internet or other electronic network activity: how you use the app and, if you accept the cookie banner, our website.
• Geolocation data: approximate location derived from your IP address, and your App Store or Google Play country. Never your precise location.
• Visual information: the profile photo you choose, if any.
• Other information you choose to give: age range, gender, goals and how you heard about us, in the optional onboarding questions.
• Sensitive personal information: your account login (email and password).

We collect it from you, from your device, from Apple, Google or Facebook when you sign in with them, and from Apple, Google and Adapty for purchases. We use it for the purposes in How We Use Your Information and disclose it for those business purposes to the service providers listed above.

Sale and sharing

We do not sell personal information, and we do not knowingly sell or share the personal information of anyone under 16. Under the CCPA, some advertising measurement can count as "sharing" for cross-context behavioral advertising, even when no money changes hands. For us this is: the Meta Pixel on our website (identifiers such as cookies, and the pages you visit), which does not load with Global Privacy Control on and, in the EU, EEA, UK, Switzerland and Canada, loads only if you accept it in the cookie banner; the app events the app sends to Meta through the Facebook SDK (on Android only if you allow ad measurement in the app); and the subscription events and advertising identifier sent to Meta (on iPhone and iPad only if you allow tracking, on Android only if you allow ad measurement in the app), as described in "Advertising identifier and ad measurement" and "Service Providers We Use".

How to opt out: on our website, use "Your Privacy Choices" in the site footer (or "Decline" in the cookie banner, where it is shown), or turn on Global Privacy Control in your browser; the Meta Pixel then does not load. On iPhone and iPad, choose "Ask App Not to Track", or turn tracking off in iOS Settings > Privacy & Security > Tracking; the advertising identifier and subscription events then are not sent, and the app events Meta still receives carry no advertising identifier. With an App Store account in the EU, EEA, UK or Switzerland, you can also choose "Not now" when the app asks, or turn off "Ad measurement (Meta)" in the app's Settings; the Facebook SDK then sends nothing to Meta. On Android, choose "Not now" when the app asks, or turn off "Ad measurement (Meta)" in the app's Settings; the app then sends nothing to Meta. You can also delete or reset the Android advertising ID in your phone's settings (Google > Ads). You can also write to info@visionariaapp.com to opt out of any other sharing.

You can use an authorized agent to make a request; we may ask the agent for your signed permission and ask you to confirm the request from the email address of your account.

How We Protect Your Information

Connections to our servers and website are encrypted (HTTPS), passwords are stored only as one-way hashes, database backups are encrypted on our server before they are copied to Google Drive, so Google cannot read them, and access to our servers is limited to the people who run the Service. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the authorities where the law requires it.

Where We Process Your Information

DK PLATINUM INC is based in the United States. Our servers are hosted by Hetzner in the European Union (Finland and Germany). Some of our service providers (for example Google, Meta, Adapty, OneSignal and Microsoft) process data in the United States or other countries. How these transfers are protected is described at the end of "Service Providers We Use".

Children's Privacy

Visionaria is for people aged 13 and over: you must be at least 13. In some EU countries the age at which you can consent to data processing yourself is higher (up to 16); where that applies, a parent or guardian must consent for younger users.

Visionaria is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that a child under 13 has given us personal data, write to us at info@visionariaapp.com and we will delete it. If we learn in any other way that we have collected personal data from a child under 13, we delete it.

Deleting Your Account

You can delete your account at any time in the app (Profile, Settings, Delete account), or by emailing info@visionariaapp.com from the email address of your account. Deleting your account does not cancel a subscription bought in the App Store or Google Play: cancel it in your store settings. Step by step instructions: Delete Your Account.